CNCC(C) study guide
CNCC(C) · Work through your exam, one topic at a time.
The CNCC(C) - Certified Network and Cybersecurity Consultant (China) - is a professional credential aimed at practitioners who advise organisations on network design, security architecture, and cyber-risk decisions rather than only operating tools. It suits security engineers moving into advisory roles, pre-sales and solution architects, internal consultants, auditors, and compliance staff who need to translate technical findings into business language for Chinese enterprise clients. The CNCC(C) study guide has 6 sections and about 1,741 words.
01Network Architecture and Security Fundamentals
The candidate must be fluent in the OSI and TCP/IP models and be able to place any control at the right layer. Understand segmentation and zoning (DMZ, internal, management planes), the difference between a stateful firewall and a stateless ACL, and where a WAF, IPS, and proxy each sit.
345 words, about 2 min02Cybersecurity Governance, Law, and Compliance
Governance is about direction, oversight, and accountability. Be able to distinguish policies (management intent), standards (mandatory specifics), procedures (step-by-step), and guidelines (recommended).
296 words, about 1 min03Risk Assessment and Security Audit
Risk is the combination of likelihood and impact against an asset and threat. Know the difference between qualitative (scales, Delphi) and quantitative (ALE = SLE × ARO; SLE = asset value × exposure factor) methods, and when each is appropriate.
304 words, about 2 min04Security Technology and Controls (Network, Host, Application, Data)
Be able to choose controls by layer. Network: firewalls, IDS/IPS, NAC, segmentation, VPN.
281 words, about 1 min05Security Operations, Monitoring, and Incident Response
Operations is where controls run day to day. Know log sources (endpoint, network, application, identity), SIEM correlation, alert tuning, and the difference between an event, an alert, and an incident.
264 words, about 1 min06Consulting Practice, Solution Design, and Client Communication
Consulting is about framing problems, scoping work, and communicating risk to decision-makers. Know how to elicit requirements (business drivers, constraints, stakeholders), define scope and assumptions, and document deliverables.
251 words, about 1 min